Privacy Policy

Sukit Foods Pvt. Ltd. is the operator of this website and the data fiduciary responsible for your personal data.

Registered office: B-67, Yash Path, Tilak Nagar, Jaipur – 302004, Rajasthan. Email: info.snackingo@gmail.com. Phone: +91 9999600377.

We only collect what we need to take and deliver your order and run the store.

• Order and delivery details: your name, mobile number, email address, delivery address, city, state and PIN code, and the products you order.
• Payment information: payments are processed by Razorpay Software Private Limited. We receive the payment ID, order ID, amount and payment status. We never see or store your card number, CVV, UPI PIN or bank login.
• Communications: messages you send us by email, phone or WhatsApp, including order queries and complaints.
• Usage data: first-party page-view statistics (page visited, time, referring website and a random session identifier). This does not include your name or contact details and is not shared with advertising networks.
• Device storage: your cart contents, coupon code, privacy choice and sound preference are stored in your browser so they survive a page refresh. This stays on your device; see the Cookies & Storage Policy.
• Privacy requests: if you send us a request about your data, we keep the request, our reply and the identity check we performed, so we can show the request was handled.

The Digital Personal Data Protection Act, 2023 requires us to give you a clear notice and to obtain your consent before we process your personal data. The short notice shown on the checkout page, together with the checkbox you tick before paying, is that notice and consent. It tells you what data we collect, why, how to exercise your rights and how to complain, and links to this policy for the full text.

When you place an order we record the version of the notice you agreed to and the date and time you agreed, alongside the order, so that both you and we can later see exactly what was consented to. If we change the notice materially, we publish a new version and ask for your consent again on your next order.

The notice and this policy are provided in English. You may ask for them in Hindi, or in any other language listed in the Eighth Schedule to the Constitution of India, by writing to info.snackingo@gmail.com, and we will provide a translation.

Withdrawing consent. You can withdraw consent at any time, and doing so is as easy as giving it:

• for the optional page-view statistics, choose Privacy choices in the footer of any page and switch analytics off;
• for anything else, use the privacy request form or write to the Grievance Officer below.

Withdrawal takes effect going forward. It does not affect processing that already happened lawfully before you withdrew, and it does not require us to delete records we must keep by law, such as invoices and tax records. If you withdraw consent for data we need to deliver an order that is still in progress, we may be unable to complete that order and will tell you so.

We use your personal data to:

• process, pack and deliver your order and send it to our courier partner;
• confirm payments, prevent fraud and handle refunds;
• contact you about your order, delivery or a complaint;
• provide order tracking when you enter your order number and mobile number;
• understand which pages are visited so we can improve the website;
• comply with tax, accounting, food-safety and other legal obligations.

Legal basis. We process your data with your consent, which you give when you place an order or contact us, and for the legitimate purpose of fulfilling the contract you enter into with us. Where the law requires us to keep records (for example tax records), we process data to meet those obligations.

We do not sell your personal data, and we do not send marketing messages unless you have asked for them. You can opt out of any marketing at any time by replying "STOP" or writing to us.

We share personal data only with service providers who need it to serve you, and only to the extent necessary:

• Razorpay (payment gateway), which processes your payment under its own privacy policy and RBI regulations.
• Courier and logistics partners, who receive your name, address and mobile number to deliver the parcel.
• Hosting and infrastructure providers (Vercel and Turso), which store our website and database. Our database is hosted in Mumbai, India; some infrastructure and backups may be located outside India in jurisdictions permitted under applicable law.
• Government authorities, when required by law, a court order or to protect our legal rights.

Each of these service providers acts as a data processor on our behalf under a written contract that limits them to processing your data only on our instructions, for the purpose we engaged them for, and with appropriate security safeguards. They may not use your data for their own purposes. We remain responsible to you as the data fiduciary.

Your data is stored in India wherever possible. It is transferred to or stored outside India only where the Digital Personal Data Protection Act, 2023 and the rules made under it permit, and never to a country the Central Government has restricted.

We do not sell your data and do not share it with advertisers or data brokers.

• Order and invoice records: 8 years from the end of the financial year, as required by Indian tax and company law.
• Abandoned (unpaid) checkouts: deleted automatically after 7 days.
• Page-view statistics: deleted automatically after 180 days.
• Customer-service correspondence: up to 3 years after the matter is closed.

When data is no longer needed, we delete it or anonymise it so it can no longer identify you.

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• access a summary of the personal data we hold about you and how it is used;
• have inaccurate or incomplete data corrected or updated;
• have your data erased when it is no longer necessary for the purpose it was collected for, subject to our legal record-keeping duties;
• withdraw consent for any processing that is based on consent;
• nominate another person to exercise these rights on your behalf if you are unable to, or in the event of your death;
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

How to make a request. The quickest way is the privacy request form, which lets you ask for access, correction, erasure, consent withdrawal or a nomination and gives you a reference number. You can also email info.snackingo@gmail.com from the address used on your order, or write to the Grievance Officer below. We may ask you to confirm your order number and mobile number so that we release data only to the right person.

Timelines. We acknowledge every request within 48 hours and resolve it within 30 days of receipt. If we cannot act on a request in full (for example because the law requires us to keep invoices), we will tell you why.

Complaints. If you are not satisfied with how we have handled your request or grievance, you have the right to complain to the Data Protection Board of India once you have exhausted our grievance process. Nothing in this policy limits your rights under the Consumer Protection Act, 2019.

The website is served only over HTTPS. Payment data is handled entirely by Razorpay, which is PCI-DSS compliant. Access to order data is restricted to authorised staff through a password-protected admin panel with login rate limiting. Our database is hosted on encrypted infrastructure in India.

No method of transmission or storage is completely secure, so we also have a plan for what happens if something goes wrong; see the next section.

A personal data breach is any unauthorised access to, or loss, disclosure or alteration of, your personal data that compromises its confidentiality, integrity or availability. If we become aware of a breach affecting your data we will, as required by the Digital Personal Data Protection Act, 2023 and the DPDP Rules:

• inform you, without undue delay, in plain language: what happened, what data was affected, what the likely consequences are, what we are doing about it and what you can do to protect yourself, together with a contact for questions;
• intimate the Data Protection Board of India without delay, and in any case within 72 hours of becoming aware of the breach, with the fuller report the Rules require as the facts become known;
• contain the breach, fix the cause and record what happened and what we did.

We will also notify Razorpay, our courier or hosting provider where the breach concerns data they hold for us.

We do not use advertising or third-party tracking cookies, and no third-party analytics. The storefront uses your browser's local storage to remember your cart, coupon and privacy choice, and, only if you agree, a session identifier to count visits. The admin panel uses a strictly necessary login cookie for authorised staff only. Razorpay may set its own cookies when its payment window opens.

The consent banner shown on your first visit, and the Privacy choices link in the footer that re-opens it, are our consent manager for optional storage. The complete list of every cookie and storage item, who sets it, how long it lasts and how to clear it is in our Cookies & Storage Policy.

Our website is intended for adults. Under the Digital Personal Data Protection Act, 2023 a person under 18 is a child, and personal data of a child may be processed only with the verifiable consent of a parent or lawful guardian. We do not knowingly collect personal data from anyone under 18, and we do not ask for age. If a parent or guardian wishes to order on a child's behalf, the parent should place the order in their own name.

We do not track children's behaviour, do not profile them and do not run targeted advertising directed at children or at anyone else. If you believe a child has provided us data, contact us or use the privacy request form and we will delete it.

In accordance with the Information Technology Act, 2000, the rules made under it and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer are:

Dr Mani G Singh, Grievance Officer, Sukit Foods Pvt. Ltd.
B-67, Yash Path, Tilak Nagar, Jaipur – 302004, Rajasthan
Email: info.snackingo@gmail.com · Phone: +91 98290 77882

We acknowledge complaints within 48 hours and resolve them within 30 days of receipt. You may also raise a request through the privacy request form. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We may update this policy from time to time. The effective date at the top shows when it was last changed. Material changes will be announced on the website. Where a change affects the purposes you consented to, we will ask for your consent again at your next order rather than rely on continued use. See also our Terms & Conditions and Cookies & Storage Policy.